This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa
File:                     326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (raw, json)
Hash identifier:          Uvbdk2C8tXT9wMyvJjpRrK1KKyxv7T7xPmChobocFto=
Subject key identifier:   30:11:08:77:47:8E:37:2C:12:5E:53:27:56:C3:95:C8:AF:A5:B3:57
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       10AD7EE2DCF11D6FB80019AB3414CF538D3C7C5B
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa
Signing time:             Tue 06 Jan 2026 06:15:04 +0000
ROA not before:           Tue 06 Jan 2026 06:10:04 +0000
ROA not after:            Tue 05 Jan 2027 06:15:04 +0000
asID:                     200078
IP address blocks:        2a0f:1cc5:2900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ad:7e:e2:dc:f1:1d:6f:b8:00:19:ab:34:14:cf:53:8d:3c:7c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Jan  6 06:10:04 2026 GMT
            Not After : Jan  5 06:15:04 2027 GMT
        Subject: CN=30110877478E372C125E532756C395C8AFA5B357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:ce:fd:db:35:b6:1f:a7:5b:30:23:cb:4a:
                    df:ac:44:98:58:ef:12:7b:36:af:c9:35:f2:4b:64:
                    d9:80:9b:13:e7:a2:c2:57:e4:54:2d:bf:18:7a:e2:
                    44:e4:ad:14:e7:c1:6a:79:e6:f2:63:3e:6a:31:74:
                    48:c8:4b:76:cc:81:42:0d:56:2f:69:a6:bb:20:57:
                    57:e9:6b:ab:4a:f3:ec:df:f6:fb:69:f6:f6:52:34:
                    4a:b4:c0:b6:7e:35:68:89:b6:38:8c:d9:5f:35:4d:
                    86:83:1e:4f:ca:e4:dc:24:bf:ef:0d:a2:71:d5:f9:
                    7a:4e:95:d6:3b:5f:48:f1:e5:40:16:de:a8:26:57:
                    d7:7e:05:d8:b8:db:97:c1:b2:24:dc:00:e1:44:ea:
                    6f:bc:d8:54:08:7c:b1:63:49:3b:83:bb:f2:80:9a:
                    57:92:93:a2:88:62:d5:4d:0f:15:95:56:9c:dd:53:
                    7e:67:f4:4d:5b:65:59:ef:45:65:c1:5d:e2:d8:9b:
                    19:c2:40:20:17:9a:63:5b:0b:ba:87:d0:c4:9f:0b:
                    cd:af:4c:94:0f:0d:42:05:01:8d:e9:7c:12:ad:1f:
                    46:2f:bc:60:51:30:cb:df:74:dc:5b:4b:00:73:75:
                    fb:23:c1:d4:54:28:b6:85:31:f8:46:ea:0b:72:42:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:11:08:77:47:8E:37:2C:12:5E:53:27:56:C3:95:C8:AF:A5:B3:57
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:f1:c5:d7:2a:7d:d9:9f:08:d9:f7:ea:72:06:ad:1a:d8:
         21:1a:ab:d4:f6:4d:ae:2c:47:dd:18:24:ac:42:e9:a1:57:ed:
         f7:6f:64:60:df:cb:f2:1f:c6:26:91:d3:63:a1:82:87:da:af:
         0e:e0:e9:f2:50:9a:42:ce:6d:48:c9:87:80:87:61:0a:07:e9:
         5d:1c:af:13:06:83:14:ed:de:3c:0d:0f:ba:41:01:7c:54:35:
         a7:40:c8:16:67:28:28:3c:2d:bd:ea:f9:99:86:b8:00:84:ed:
         2f:62:01:70:9b:5a:db:2b:e2:28:a9:16:b5:43:9c:0f:40:aa:
         56:a0:49:96:d0:3e:1a:17:f7:0a:a9:bf:fb:27:96:41:15:fa:
         3e:ca:78:f0:dc:e2:c2:51:33:65:ad:c5:ac:fb:e6:b3:6b:69:
         82:a4:77:42:f7:e6:89:74:6e:63:c0:2d:39:cd:79:f2:26:f4:
         c3:77:5c:f9:1e:7c:57:31:33:12:85:c8:6f:ec:4d:4e:8d:5c:
         7e:64:6c:48:54:4f:10:af:c0:50:b5:b9:27:2d:1d:55:49:19:
         3a:8f:36:28:4d:02:4e:5f:98:33:ff:e0:cf:b2:af:c6:37:d2:
         87:b1:78:21:22:e5:08:b6:50:3c:9b:a3:42:c7:0d:de:af:64:
         5d:e9:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:43:06 2026 by rpki-client